Ticket #6279: pof.xml.txt

File pof.xml.txt, 2.4 KB (added by grarpamp, 7 years ago)
Line 
1<ruleset name="POF/PlentyOfFish" default_off="Site 302's HTTPS entry points">
2
3<!--
4# POF formerly answered, but did not advertise, HTTPS.
5# As of about 20120701, POF returns 302 on HTTPS at the usual
6#  entry points, particularly https://www.pof.com/.
7# Therefore logon and general usage via HTTPS is impossible.
8# This more complete ruleset worked before that change.
9#
10# If POF returns to HTTPS service, try toggling this ruleset.
11# Some exclusions and finer pcre's may be needed at that time.
12#
13# Though the site is not usable, some deep links may still work:
14#  https://www.pof.com/member778.htm
15-->
16
17<!--
18# Cert notes
19#  - Various deployed certs are broken, for example...
20#   o SHA1 04:94:9E:E9:97:17:72:8B:4E:8F:79:25:F1:96:2F:BE:6D:2B:77:75
21#     www.pof.com, valid to the root, but CN is caps: CN=WWW.POF.COM
22#   o Use of mismatched, or lack of, alternate names.
23-->
24
25<!--
26# Non exhaustive list of hosts observed in the wild...
27#
28#                 pof.com
29#             www.pof.com
30#            pics.pof.com
31#           pics1.pof.com
32#           pics2.pof.com
33#           pics3.pof.com
34#           imgup.pof.com
35#          secure.pof.com
36#            blog.pof.com
37#             ads.pof.com
38#        blog.ads.pof.com
39#        plentyoffish.com
40#    www.plentyoffish.com
41#   pics.plentyoffish.com
42# forums.plentyoffish.com
43# upload.plentyoffish.com
44#   pics.plentyofsite.com
45#              www.pof.de
46#              www.pof.fr
47#
48# There may be other hosts/domains, particularly that of:
49#  - the chat servers,          ie: chatenabled.pof.com
50#  - the advertisement servers, ie: d6y1.ads.pof.com
51#  - raw IP addresses,          ie: 64.34.110.174
52-->
53
54<target host="pof.com" />
55<target host="*.pof.com" />
56<!-- *'s documentation says this entry should not be needed -->
57<target host="*.ads.pof.com" />
58
59<target host="plentyoffish.com" />
60<target host="*.plentyoffish.com" />
61
62<target host="plentyofsite.com" />
63<target host="*.plentyofsite.com" />
64
65<target host="pof.de" />
66<target host="*.pof.de" />
67<target host="plentyoffish.de" />
68<target host="*.plentyoffish.de" />
69
70<target host="pof.fr" />
71<target host="*.pof.fr" />
72<target host="plentyoffish.fr" />
73<target host="*.plentyoffish.fr" />
74
75<!-- These hosts do not answer HTTPS -->
76<exclusion pattern="^http://forums\.plentyoffish\.com/" />
77
78<!-- Simple pcre style -->
79<rule from="^http://((?:[^.]+\.)*)([^.]+\.?)/"  to="https://$1$2/" />
80
81<!--
82# TODO
83#  - Cookie handling: <securecookie host="^...$" name=".*" />
84-->
85
86</ruleset>